Sign in
Explore
Add-ons · PluginTesting & SecuritySecurity auditsReviewed

sonarqube

Enforces SonarQube quality and security in the agent loop: analysis after every file edit, pre-tool secrets scanning, quality gate and coverage commands, plus the SonarQube CLI and MCP server.

View on GitHub
Kind
Plugin
Works with
Claude Code
Source
anthropics/claude-plugins-official @ 58267944f921
Path
.claude-plugin/marketplace.json#sonarqube
Jobs
Review, Guardrails
Topics
Security audits

Credit

Made by
anthropics
Original
github.com/SonarSource/sonarqube-agent-plugins.git
License
Apache-2.0

Listed by Skill Manifest; not made by us.

InstallInstall it from a plugin marketplace.
/plugin install sonarqube@claude-plugins-official
Install factsScanned 2 Nov 2026
Adds
  • A plugin installed through /plugin
Runs scripts
Unknown
Uses the network
None found
Needs secrets
None found
Source revision
58267944f921
Licence
Apache-2.0
Last activity
1 Nov 2026
Review
Reviewed

Found by a static scan of the stored text; nothing is run. “None found” is not a guarantee, so read what you install before you run it.

  • The plugin's parts are not listed in the stored manifest
sonarqube
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
Source: https://github.com/SonarSource/sonarqube-agent-plugins.git
{
  "name": "sonarqube",
  "description": "Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.",
  "author": {
    "name": "SonarSource"
  },
  "category": "security",
  "source": {
    "source": "url",
…